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AMENDMENTS TO CLAIMS: 

Please amend the claims as follows: 

1 . (Previously Presented) A method for encrypting data, the method comprising: 

providing a first data processing system for a first user and a second data 
processing system for a second user; 

providing a session key randomly generated by the second system for use in 
encrypting original data; 

encrypting the data using the session key and a symmetric encryption routine; 

encrypting the session key, with a public key of the first user using an 
asymmetric encryption routine, for storage as a first user key blob; 

encrypting the session key, with a master public key using the asymmetric 
encryption routine, for storage as a master key blob; 

storing a first user private key on any media; 

decrypting the user key blob using the asymmetric encryption routine providing 
the first system with access to the session key; and 

the first system decrypting the data using the symmetric encryption routine and 
securely transmitting the data to the first system. 

2. -6. (Cancelled) 

7. (Previously Presented) The method, as set forth in claim 1, further comprising storing 
the first user's private key on a data storage medium coupled to a destination data 
processing system. 

8. (Previously Presented) The method, as set forth in claim 1, further comprising storing 
the master private key on a data storage medium coupled to the destination data 
processing system. 

9. (Previously Presented) The method, as set forth in claim 7, further comprising retrieving 
the first user's private key from a smart card utilizing a smart card reader coupled to the 
destination data processing system. 
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10. (Previously Presented) The method, as set forth in claim 7, further comprising retrieving 
the master private key from a smart card utilizing a smart card reader coupled to the 
destination data processing system. 

1 1 . (Previously Presented) The method, as set forth in claim 1 , further comprising utilizing a 
plurality of public keys and a plurality of private keys. 

12. (Previously Presented) A method for encrypting data comprising: 

providing a first data processing system for a first user and a second data 
processing system for a second user; 

providing a session key randomly generated by the second system for use in 
encrypting original data; 

encrypting the data using the session key and a symmetric encryption routine; 

encrypting the session key, with a public key of the first user using an 
asymmetric encryption routine, for storage as a first user key blob; 

encrypting the session key, with a master public key using the asymmetric 
encryption routine, for storage as a master key blob; 

storing a first user private key on any media; 

decrypting the user key blob using the asymmetric encryption routine providing 
the first system with access to the session key; and 

the first system decrypting the data using the symmetric encryption routine and 
securely transmitting the data to the first system and; 

a third party gaining access to the data using a master private key to decrypt the 
master key blob using the asymmetric encryption routine and gain access to the original 
data. 

13. -17. (Cancelled) 

18. (Previously Presented) The method as set forth in claim 12, wherein the first user's 
private key is stored on a data storage medium coupled to the second data processing 
system. 

19. (Previously Presented) The method as set forth in claim 12, wherein the master private 
key is stored on a data storage medium coupled to the second data processing system. 
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20. (Previously Presented) The method as set forth in claim 12, further comprising a smart 
card reader coupled to the second data processing system and operable to retrieve the 
first user's private key from a smart card. 

21. (Previously Presented) The method as set forth in claim 12, further comprising a smart 
card reader coupled to the second data processing system and operable to retrieve the 
master private key from a smart card. 

22. (Previously Presented) The method as set forth in claim 12, further comprising: 

a plurality of private keys; and 
a plurality of public keys. 

23. - 29. (Cancelled) 
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30. (Previously Presented) A method for encrypting data comprising: 

providing a first data processing system for a first user and a second data 
processing system for a second user; 

the second user sending the first user a data file; 

the second system randomly generating a session key for use in encrypting 
original data in the data file; 

using the session key, the second system encrypting the data using a symmetric 
encryption routine; 

encrypting the session key, with a public key of the first user using an 
asymmetric encryption routine, for storage as a first user key blob within the encrypted 
data; 

encrypting the session key with a master public key using the asymmetric 
encryption routine, for storage as a master key blob within the encrypted data; 
transmitting the encrypted data to the first system; 
storing a first user private key on any media; 

decrypting the user key blob using the asymmetric encryption routine providing 
the first system with access to the randomly generated session key; 

the first system decrypting the data using the symmetric encryption routine and 
securely transmitting the data to the first system; and 

a third party gaining access to the data using a master private key to decrypt the 
master key blob using the asymmetric encryption routine and gain access to the original 
data. 
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